CLF-C02 · Question #211
A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshot
The correct answer is B. The company. For managed database services like Amazon Aurora, the encryption of databases and backups, which pertains to customer data, is the customer's responsibility under the AWS shared responsibility model.
Question
A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups. Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?
Options
- AAWS
- BThe company
- CAWS Marketplace partners
- DThird-party partners
How the community answered
(38 responses)- A16% (6)
- B71% (27)
- C8% (3)
- D5% (2)
Why each option
For managed database services like Amazon Aurora, the encryption of databases and backups, which pertains to customer data, is the customer's responsibility under the AWS shared responsibility model.
AWS is responsible for the security of the underlying service (Aurora itself), but not for managing the encryption of customer-specific data within that service.
While AWS provides the encryption capabilities (like AWS Key Management Service integration), the customer (the company) is responsible for enabling, configuring, and managing the encryption keys and settings for their Aurora database clusters and snapshots. This falls under 'security in the cloud,' specifically regarding customer data.
AWS Marketplace partners are not directly involved in managing the encryption of a customer's Aurora database.
Third-party partners are not directly involved in managing the encryption of a customer's Aurora database.
Concept tested: Shared Responsibility Model (customer responsibilities for data encryption)
Source: https://aws.amazon.com/compliance/shared-responsibility-model/
Community Discussion
No community discussion yet for this question.